Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/27874238C4198DC56AFAE0BB55DEBF31CD503526.cer
File:                     27874238C4198DC56AFAE0BB55DEBF31CD503526.cer (raw, json)
Hash identifier:          ZhGYjkO1DqmIUxLCZ4spwo8Xt6MHh3f6cgVNeEUgJpM=
Subject key identifier:   27:87:42:38:C4:19:8D:C5:6A:FA:E0:BB:55:DE:BF:31:CD:50:35:26
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       467D2BA62FB212F8F9B49A14AF93D7BB81A59D5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/27874238C4198DC56AFAE0BB55DEBF31CD503526.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 20 Oct 2025 22:58:52 +0000
Certificate not after:    Mon 19 Oct 2026 23:03:52 +0000
Subordinate resources:    AS: 264246
                          IP: 138.118.56.0/22
                          IP: 2804:24e0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 00:09:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:7d:2b:a6:2f:b2:12:f8:f9:b4:9a:14:af:93:d7:bb:81:a5:9d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 20 22:58:52 2025 GMT
            Not After : Oct 19 23:03:52 2026 GMT
        Subject: CN=27874238C4198DC56AFAE0BB55DEBF31CD503526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e1:ad:c2:75:1d:a3:93:9d:75:e2:18:76:35:
                    fc:f3:b9:11:82:8c:e6:bb:da:25:3c:10:48:45:6f:
                    f3:dd:0a:b4:1d:d4:c8:32:8f:31:42:74:65:77:c1:
                    c4:5c:14:93:9c:59:e9:3d:2d:00:0a:17:ac:2d:c8:
                    c2:3a:da:7a:9b:f9:d4:fd:3e:b0:1c:1a:17:0b:fd:
                    31:59:53:3d:0a:b8:b0:f8:ad:51:49:35:c3:3e:fa:
                    c1:26:32:9b:2b:9c:d7:12:f4:6e:f6:6f:c3:05:8f:
                    d7:97:70:46:1b:7b:a9:2b:6c:42:1d:35:d9:2c:b7:
                    f5:77:3e:a3:10:a2:29:16:be:a9:d4:8d:25:20:aa:
                    55:d5:66:cc:95:b5:3c:60:21:77:e3:42:5c:53:80:
                    a2:37:ef:16:09:b9:87:72:a8:ce:d7:e9:a8:fa:3d:
                    72:b3:36:87:d5:b2:14:11:a1:9e:d2:28:db:a3:76:
                    a7:95:f6:18:d7:54:ca:f0:ff:78:12:29:79:c6:a5:
                    85:50:ed:60:40:cb:92:ad:aa:ff:34:71:b8:d6:62:
                    94:cd:73:a6:4c:50:27:b4:1d:77:ca:27:03:34:bb:
                    37:e6:cd:98:ad:58:b4:3a:14:0f:f3:3f:e6:53:78:
                    fa:6f:2e:8b:f6:d2:60:b6:15:74:3d:c6:cf:0c:2e:
                    0e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                27:87:42:38:C4:19:8D:C5:6A:FA:E0:BB:55:DE:BF:31:CD:50:35:26
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/27874238C4198DC56AFAE0BB55DEBF31CD503526.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.56.0/22
                IPv6:
                  2804:24e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264246

    Signature Algorithm: sha256WithRSAEncryption
         cb:69:4e:61:ff:fb:b0:0f:8b:eb:e2:17:64:ce:34:d8:1e:41:
         3c:2b:74:75:bc:97:32:87:e0:00:0e:66:41:41:56:c2:af:70:
         a1:bb:70:7a:a1:6b:da:42:3e:df:ae:b9:e5:07:aa:c7:dc:01:
         d7:0a:87:5c:84:64:58:98:60:82:e6:dd:fd:58:0b:7f:16:2d:
         3d:a8:57:f6:6e:72:68:15:9d:39:6a:1d:59:ea:34:99:ed:93:
         b7:55:bd:38:6a:bd:8f:7e:3d:e5:b1:3f:83:50:80:ef:27:68:
         6d:37:f8:c8:3a:eb:25:0b:a9:f6:6d:ed:85:e6:f4:45:47:c3:
         6e:27:43:68:ac:d2:09:9c:71:cf:10:91:58:e1:d0:9a:33:cd:
         91:96:7d:2a:d8:40:c0:e4:d6:03:a8:19:f4:f1:77:b5:a1:87:
         34:09:17:f9:38:ab:f4:28:7e:3b:f3:03:64:ca:4b:b9:93:20:
         d3:15:19:3c:4e:b7:33:1b:89:f7:cb:05:c8:d3:52:ed:74:ac:
         93:d9:84:22:6c:3c:65:7b:e2:78:36:bd:e5:f2:f2:60:35:29:
         7f:ea:2d:c6:80:8c:e0:f2:fa:98:0d:9f:c5:bb:8f:a5:41:83:
         e6:e9:a5:ec:4e:17:5e:68:14:bb:ce:e9:b8:be:1c:35:52:3d:
         7d:25:f0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 23:00:24 2025 by rpki-client